~talya/enbi

Kubernetes Operator for (automatically) building containers from Nix flakes. ·

👀

k8s

👀

nix

r/o

authored by ~talya

authored by Asherah Connor <ashe@kivikakk.ee> 6 months ago
committed by Asherah Connor <ashe@kivikakk.ee> 6 months ago

rbac: add node get/list.

config/rbac/role.yaml | 7 +++++++

2 files changed, 8 insertions(+)

index 25ada67..f7f97a1 100644

--- a/config/rbac/role.yaml

+++ b/config/rbac/role.yaml

@@ -14,6 +14,13 @@ rules:

- apiGroups:

- ""

resources:

+ - nodes

+ verbs:

+ - get

+ - list

+- apiGroups:

+ - ""

+ resources:

- persistentvolumeclaims

verbs:

- create

index 8ecfc86..6baa094 100644

--- a/internal/controller/nixbuild_controller.go

+++ b/internal/controller/nixbuild_controller.go

@@ -86,6 +86,7 @@ type NodeRepel struct {

// +kubebuilder:rbac:groups=enbi.hrzn.ee,resources=nixbuilds,verbs=get;list;watch;create;update;patch;delete

// +kubebuilder:rbac:groups=enbi.hrzn.ee,resources=nixbuilds/status,verbs=get;update;patch

// +kubebuilder:rbac:groups=enbi.hrzn.ee,resources=nixbuilds/finalizers,verbs=update

+// +kubebuilder:rbac:groups=core,resources=nodes,verbs=get;list

// +kubebuilder:rbac:groups=core,resources=events,verbs=create;patch

// +kubebuilder:rbac:groups=core,resources=persistentvolumeclaims,verbs=get;list;watch;create;update;patch;delete

// +kubebuilder:rbac:groups=core,resources=persistentvolumeclaims/status,verbs=get